VulnerabilitycriticalExploited in the wild

Cacti, Realtek, and IBM Aspera Faspex Vulnerabilities Under Active Exploitation

The Hacker Newsby @TheHackersNewsApr 1, 2023 · 08:11 UTC (Apr 1, 2023)2 min read4 · 1 read

Read at thehackernews.com

Analyze CVE-2022-46169 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-46169 CVE-2021-35394 CVE-2022-47986

Tags: cve-2022-46169 cve-2021-35394 cve-2022-47986 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35394	Remote Code Execution via Memory Corruption in Realtek Jungle SDK	9.8	100%	KEVPoC	Aug 16, 2021 KEV Dec 10, 2021
CVE-2022-46169	Unauthenticated Command Injection in Cacti (CVE-2022-46169)	9.8	100%	KEVPoC	Dec 5, 2022 KEV Feb 16, 2023
CVE-2022-47986	YAML Deserialization RCE in IBM Aspera Faspex	9.8	100%	KEVRansomware	Feb 17, 2023 KEV Feb 21, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Apr 01, 2023 Cyber Attack / Vulnerability Critical security flaws in Cacti, Realtek, and IBM Aspera Faspex are being exploited by various threat actors in hacks targeting unpatched systems. This entails the abuse of CVE-2022-46169 (CVSS score: 9. 8) and CVE-2021-35394 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.